Privacy Policy

This Privacy Policy explains how IT Servant Leaders LP ("we," "us," or "our") collects, uses, and protects your personal data when you visit itsd.gr and use our services, including Project Management, IT Recruitment, and Training.

We are committed to protecting your privacy and processing your personal data in full compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Greek law.

We collect information that you voluntarily provide when contacting us through our website, submitting a form, or engaging with our services. This may include:

• Name and contact details (email address, phone number)
• Curriculum Vitae (CV) and professional history — for IT Recruitment services
• Company name and professional role — for project or training inquiries
• Any other information you choose to include in your message

We do not collect sensitive personal data (special categories under GDPR) unless explicitly required and consented to. We do not use automated decision-making or profiling.

We process your personal data for the following purposes:

• Responding to inquiries — to answer questions submitted via our contact form (Legal basis: Consent)
• IT Recruitment — to evaluate candidates for relevant opportunities shared with our network (Legal basis: Legitimate Interest)
• Service delivery — to deliver Project Management, Training, and consulting services you have requested (Legal basis: Contract performance)
• Legal compliance — to meet our obligations under applicable law (Legal basis: Legal obligation)

By submitting our contact form, you agree to the processing of your personal data by IT Servant Leaders LP as described in this Privacy Policy, for the purpose of responding to your request.

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law.

• Contact form submissions: up to 12 months from the date of receipt
• CV and recruitment data: up to 24 months, unless you request earlier deletion
• Contractual data: for the duration of the contract plus any applicable statutory retention period

After the retention period expires, your data is securely deleted or anonymized.

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access — request a copy of the data we hold about you
• Right to Rectification — request correction of inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten") — request deletion of your data
• Right to Restriction — request that we limit how we process your data
• Right to Data Portability — receive your data in a structured, machine-readable format
• Right to Withdraw Consent — at any time, without affecting the lawfulness of prior processing
• Right to Lodge a Complaint — with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr

To exercise any of these rights, please contact us at the details below. We will respond within 30 days.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or disclosure. Our website is hosted on secure infrastructure and all data transmissions are encrypted via SSL/TLS.

We do not sell, rent, or trade your personal data to third parties. We may share data with trusted service providers (e.g., hosting, email delivery) who process it on our behalf under strict data processing agreements compliant with GDPR Article 28.

Your data is processed within the European Economic Area (EEA). If any transfer outside the EEA is required, we ensure adequate safeguards are in place.

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact the data controller: